$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json) Hash identifier: uDGAFWg4gDg2WhiB1lHsuvJK0KP1Wu3MxZeXbJ8BgIA= Subject key identifier: F8:03:7E:B9:01:6C:D3:A6:F6:42:2F:7E:1F:FD:36:00:52:F4:40:02 Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Certificate serial: 062F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft Manifest number: 0629 Signing time: Sun 14 Sep 2025 23:03:31 +0000 Manifest this update: Sun 14 Sep 2025 23:03:30 +0000 Manifest next update: Sun 21 Sep 2025 23:03:30 +0000 Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: 5hUkV0a/p8IWdAyUTLwPw4Tn+/ykRmT/XTQA8KWh42w=) 2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 2zuRRC9X9QGiy5zsxYozQv/RNV6iHA3e11RJdVWl2NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Sep 2025 23:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Validity Not Before: Sep 14 23:03:30 2025 GMT Not After : Sep 21 23:03:30 2025 GMT Subject: CN=68c749c3-2fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a4:29:fe:2b:a2:b0:10:d1:ef:3f:07:85:40: ff:69:a5:7e:32:4e:a0:c9:18:51:da:db:b5:83:f4: 10:4a:3c:c6:4e:9b:e5:52:87:80:d3:07:8e:02:11: 5d:30:d4:80:17:f8:4d:72:e9:2f:11:a2:f7:fc:db: 19:c3:a4:81:bf:03:24:db:35:35:2d:30:4d:3f:34: 19:b4:27:87:90:19:50:fe:63:e8:02:a9:8f:e8:5f: ac:5d:d6:94:a5:b1:2b:30:e2:60:a4:76:12:70:71: 9f:bb:49:44:74:b0:cd:1c:2e:e1:a2:6a:cd:fc:e9: 83:94:0c:1a:83:c9:e1:00:1d:71:6f:45:e3:b6:54: 96:ad:98:8c:55:cd:13:32:69:07:91:40:06:d9:62: e2:9d:d8:70:7a:f4:b9:fd:ff:6d:1c:67:df:d6:ee: fa:83:48:1c:48:3e:04:50:ba:60:08:9e:c8:a0:99: 50:d9:b0:06:12:53:42:31:82:ab:85:96:5e:54:70: a4:51:e6:70:24:4c:9c:86:a1:38:7a:db:ac:20:89: 98:a1:e3:18:18:55:48:5e:98:5d:0f:eb:a8:7a:23: 03:70:34:b3:af:9e:ae:a4:17:f2:7a:dc:01:8e:c5: dc:41:a5:a6:6a:ed:18:aa:31:6a:da:e8:76:92:01: a6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:03:7E:B9:01:6C:D3:A6:F6:42:2F:7E:1F:FD:36:00:52:F4:40:02 X509v3 Authority Key Identifier: keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:72:fc:2f:e0:8a:25:64:d8:72:fc:51:b4:4d:69:a6:ca:f9: 52:bd:78:67:21:07:c8:67:6f:61:61:04:83:1b:ce:fd:36:fc: 08:29:9b:7a:ee:1c:f7:04:75:41:4d:ec:46:e9:a2:63:1c:fa: 04:15:27:13:9e:2f:a7:b7:35:b5:c0:75:96:44:1d:45:4f:14: cc:de:c0:89:df:0b:f1:54:7c:0b:67:f4:f1:73:35:bb:43:75: 80:13:ba:7b:9b:fd:9f:f9:5e:0a:de:89:d7:fa:36:67:c5:ea: e0:41:a5:45:f4:d6:2d:ba:08:6f:4f:b2:04:ca:03:4e:a9:0c: 60:69:38:e1:51:e1:83:fe:2e:f0:1d:53:7e:13:73:98:8a:29: 9c:09:f3:d0:9c:4c:37:6b:41:cf:3a:ae:da:dd:58:2d:9a:d5: 68:c6:dd:86:75:de:1f:df:1f:67:2d:c1:c9:b3:9b:e6:1b:66: 96:89:81:d1:f1:17:29:2a:81:bd:71:8e:48:e6:4e:45:43:44: d4:2a:b8:39:b3:97:cd:6c:9c:7b:ba:24:43:5b:75:d1:dd:e1: 18:c6:e0:d4:87:3a:19:d8:41:e8:e3:a1:50:aa:67:20:ec:0b: af:ba:17:ea:19:95:60:a9:60:42:bf:ce:88:76:16:8b:4b:f5: 12:8c:18:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDA4RDNGQkE4RERDMjE4Q0JCMzAzOUMwMzc2MUU2QUI3 MDc2RTRGQTIwHhcNMjUwOTE0MjMwMzMwWhcNMjUwOTIxMjMwMzMwWjAYMRYwFAYD VQQDEw02OGM3NDljMy0yZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46Qp/iuisBDR7z8HhUD/aaV+Mk6gyRhR2tu1g/QQSjzGTpvlUoeA0weOAhFd MNSAF/hNcukvEaL3/NsZw6SBvwMk2zU1LTBNPzQZtCeHkBlQ/mPoAqmP6F+sXdaU pbErMOJgpHYScHGfu0lEdLDNHC7homrN/OmDlAwag8nhAB1xb0XjtlSWrZiMVc0T MmkHkUAG2WLindhwevS5/f9tHGff1u76g0gcSD4EULpgCJ7IoJlQ2bAGElNCMYKr hZZeVHCkUeZwJEychqE4etusIImYoeMYGFVIXphdD+uoeiMDcDSzr56upBfyetwB jsXcQaWmau0YqjFq2uh2kgGmXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgDfrkB bNOm9kIvfh/9NgBS9EACMB8GA1UdIwQYMBaAFAjT+6jdwhjLswOcA3YearcHbk+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83QjZDQTEyMkFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dNdXpBNXdEZGg1cXR3ZHVU NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOUDdxTjNDR011ekE1d0RkaDVxdHdkdVQ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83QjZDQTEyMkFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dN dXpBNXdEZGg1cXR3ZHVUNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEcvwv4IolZNhy/FG0TWmmyvlSvXhnIQfIZ29hYQSDG879NvwIKZt6 7hz3BHVBTexG6aJjHPoEFScTni+ntzW1wHWWRB1FTxTM3sCJ3wvxVHwLZ/TxczW7 Q3WAE7p7m/2f+V4K3onX+jZnxergQaVF9NYtughvT7IEygNOqQxgaTjhUeGD/i7w HVN+E3OYiimcCfPQnEw3a0HPOq7a3VgtmtVoxt2Gdd4f3x9nLcHJs5vmG2aWiYHR 8RcpKoG9cY5I5k5FQ0TUKrg5s5fNbJx7uiRDW3XR3eEYxuDUhzoZ2EHo46FQqmcg 7AuvuhfqGZVgqWBCv86IdhaLS/USjBiB -----END CERTIFICATE-----Generated at Tue Sep 16 14:18:25 2025 by rpki-client